Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ef1316bb97c1b405573ef50c51aa3bc7_JaffaCakes118
-
Size
130KB
-
Sample
240921-e65hhsvgnk
-
MD5
ef1316bb97c1b405573ef50c51aa3bc7
-
SHA1
0ecc4388be55abcc11d3952820f947ffdf7186c0
-
SHA256
9c785f9a62f412667ff742efa6af0f522609a7fdbfb0e70f28279799b36a488e
-
SHA512
164f230549b5fe29a5457be366da7316301db8d63ddea2dae3bd6a25dec04b9503105144af3ea78e8b9b0996a9e634d86c63e3971dcd6745b2357695964255d3
-
SSDEEP
3072:lZwldXyig5q8sqi8N+ZSQEGntvYp8lLF0UWNvMVvVxsLU:l5igqXlE6YYB0UWtGVxsLU
Static task
static1
Behavioral task
behavioral1
Sample
ef1316bb97c1b405573ef50c51aa3bc7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef1316bb97c1b405573ef50c51aa3bc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ef1316bb97c1b405573ef50c51aa3bc7_JaffaCakes118
-
Size
130KB
-
MD5
ef1316bb97c1b405573ef50c51aa3bc7
-
SHA1
0ecc4388be55abcc11d3952820f947ffdf7186c0
-
SHA256
9c785f9a62f412667ff742efa6af0f522609a7fdbfb0e70f28279799b36a488e
-
SHA512
164f230549b5fe29a5457be366da7316301db8d63ddea2dae3bd6a25dec04b9503105144af3ea78e8b9b0996a9e634d86c63e3971dcd6745b2357695964255d3
-
SSDEEP
3072:lZwldXyig5q8sqi8N+ZSQEGntvYp8lLF0UWNvMVvVxsLU:l5igqXlE6YYB0UWtGVxsLU
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-